Known vulnerabilities in Microsoft Exchange Server 2019 Cumulative Update 10 Jan22SU 15.02.0922.020 - page 2

Vendor: Microsoft
Version: 2019 Cumulative Update 10 Jan22SU 15.02.0922.020
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 56
Public exploits: 5
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Exchange Server version 2019 Cumulative Update 10 Jan22SU 15.02.0922.020 Microsoft Exchange Server 2019 Cumulative Update 10 Jan22SU 15.02.0922.020 is affected by 56 vulnerabilities: 3 critical, 10 high, 39 medium, 4 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82691 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
- 02.11.2023 SB2023110256
#VU81831 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-36778
CWE-78 Medium
No
No
2016 CU23 Oct23SU 15.01.2507.034, 2019 CU12 Oct23SU 15.02.1118.039, 2019 CU13 Oct23SU 15.02.1258.027 10.10.2023 SB2023101094
#VU80673 - Deserialization of Untrusted Data
CVE-2023-36745
CWE-502 Medium
Public exploit available
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80672 - Deserialization of Untrusted Data
CVE-2023-36756
CWE-502 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80670 - Improper Authentication
CVE-2023-36757
CWE-287 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80668 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36777
CWE-200 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU80667 - Deserialization of Untrusted Data
CVE-2023-36744
CWE-502 Medium
No
No
2016 CU23 Aug23SUv2 15.01.2507.032, 2019 CU12 Sep23SU 15.02.1118.037, 2019 CU13 Aug23SUv2 15.02.1258.025 12.09.2023 SB2023091254
#VU79166 - Improper input validation
CVE-2023-35368
CWE-20 High
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080872
#VU79151 - Improper input validation
CVE-2023-35388
CWE-20 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79150 - Improper input validation
CVE-2023-38182
CWE-20 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79149 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-38181
CWE-451 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79147 - Improper input validation
CVE-2023-38185
CWE-20 Medium
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU79146 - Permissions, Privileges, and Access Controls
CVE-2023-21709
CWE-264 High
No
No
2016 CU23 Aug23SU 15.01.2507.031, 2019 CU12 Aug23SU 15.02.1118.036, 2019 CU13 Aug23SU 15.02.1258.023 08.08.2023 SB2023080867
#VU77240 - Deserialization of Untrusted Data
CVE-2023-32031
CWE-502 High
Public exploit available
No
2016 CU23 Jun23SU 15.01.2507.027, 2019 CU12 Jun23SU 15.02.1118.030, 2019 CU13 Jun23SU 15.02.1258.016 13.06.2023 SB2023061355
#VU77238 - Improper input validation
CVE-2023-28310
CWE-20 Medium
No
No
2016 CU23 Jun23SU 15.01.2507.027, 2019 CU12 Jun23SU 15.02.1118.030, 2019 CU13 Jun23SU 15.02.1258.016 13.06.2023 SB2023061355
#VU72174 - Exposed Dangerous Method or Function
CVE-2023-21529
CWE-749 High
No
Exploited
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72173 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21707
CWE-94 High
Public exploit available
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72172 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21706
CWE-94 High
No
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU72171 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-21710
CWE-94 Medium
No
No
2013 CU23 Feb23SU 15.00.1497.047, 2016 CU23 Feb23SU 15.01.2507.021, 2019 CU11 Feb23SU 15.02.0986.041, 2019 CU12 Feb23SU 15.02.1118.025 14.02.2023 SB2023021424
#VU70915 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2023-21745
CWE-300 Medium
No
No
2016 CU23 Jan23SU 15.01.2507.017, 2019 CU11 Jan23SU 15.02.0986.037, 2019 CU12 Jan23SU 15.02.1118.021 10.01.2023 SB2023011045


Showing elements 21 - 40 out of 56